Your privacy is more than a legal obligation to aa66 — it is a responsibility we take wholeheartedly. This document clearly explains what information we collect, why we need it, and how we protect it at all times.
All data is transmitted and stored with 256-bit SSL encryption — the same standard used by leading financial institutions worldwide.
AA66 fully complies with Malaysia's Personal Data Protection Act 2010 (PDPA) in all aspects of player data management.
AA66 has never and will never sell, rent, or trade players' personal information to any third party.
You have the full right to access, amend, delete, or restrict the use of your personal data at any time.
Quick Summary: AA66 collects data necessary to operate the platform, ensure account security, and comply with the law. We do not sell your data. You have full control over your personal information. For any questions, we are available 24/7.
This Privacy Policy ("Policy") is published by AA66 ("Platform", "We") and outlines our commitment to protecting the personal information of all individuals using our platform, whether through the aa66.ng website or the AA66 mobile app.
We understand that your trust cannot be bought. Every time you share personal information with aa66, you are placing your trust in us to keep it safe. We take this responsibility seriously and implement multiple layers of protection to ensure your data remains secure at all times.
This Policy applies to all AA66 platform users, including visitors without an account, registered players, and VIP members. By using our platform, you agree to the collection and use of information as described in this Policy.
AA66 only collects information that is strictly necessary to operate the platform securely and comply with applicable legal requirements. The following are the types of information we collect:
| Type of Information | Example | Primary Purposes |
|---|---|---|
| Identity Information | Full name, IC / passport number, date of birth | Identity verification (KYC), fraud prevention |
| Contact Information | Email address, phone number | Account communications, important notifications |
| Financial Information | Bank account number, bank name, digital wallet number | Processing deposits and withdrawals |
| Supporting Documents | MyKad photo, bank statement, proof of address | KYC and anti-money laundering compliance |
Security Assurance: AA66 does not directly store your credit or debit card numbers. All payments are processed through PCI-DSS certified third-party payment gateways. We only retain transaction references, not full card data.
Every use we make of your data has a clear and legitimate purpose. We do not use your data for purposes unrelated to the operation of the aa66 platform. The following are the primary purposes for which your information is used:
Note: AA66 uses aggregated (non-individual) data analytics to understand overall platform usage patterns. Your individual data is never used to build marketing profiles sold to external advertisers.
AA66 does not sell, rent, or trade your personal information to any third party for their commercial purposes. We only share information in limited, controlled situations as follows:
We work with carefully selected service providers to operate certain aspects of the platform — including payment processing, identity verification, cloud computing, and technical analytics. All providers are bound by strict confidentiality agreements and are only permitted to process your data for the purposes we specify.
AA66 will share information with the relevant authorities when required by law, court order, or official investigation. This includes law enforcement agencies, financial regulatory bodies, and courts of competent jurisdiction.
In the event of a company acquisition, merger, or asset sale, user information may be transferred as part of the business assets. Players will be notified in advance should such a transfer occur, and your rights under this Policy will continue to be protected.
Player data security is one of aa66's biggest investments. We implement multiple layers of technical and organisational protection to keep your information safe from any threat:
Access to player personal data within the AA66 organisation is strictly restricted on a need-to-know basis. Every staff member with access to player data has undergone thorough background checks, and all access is recorded in audit logs that are continuously monitored.
Security Certification: aa66's payment infrastructure complies with PCI-DSS (Payment Card Industry Data Security Standard). The payment gateways we use hold internationally recognised security certifications.
AA66 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. Cookies are small text files stored on your device by your web browser.
You can manage your cookie settings through your browser preferences. However, disabling essential cookies may affect the functionality and security of your AA66 platform experience.
AA66 retains your personal information for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable law. The following are our data retention period guidelines:
Once the relevant retention period has expired, your data will be securely deleted or anonymised using industry-recognised data deletion procedures.
Under Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection best practices, you have the following rights regarding your personal data held by aa66:
You have the right to know what personal information we hold about you and how it is used.
You have the right to request correction of any inaccurate or incomplete information at no charge.
Under certain circumstances, you may request the deletion of your personal data ("right to be forgotten").
You may object to the use of your data for direct marketing or profiling purposes at any time.
You have the right to receive a copy of your personal data in a machine-readable format for transfer to another platform.
You may request that we restrict the processing of your data in certain situations while a dispute is being resolved.
To exercise any of the above rights, contact the aa66 data protection team via email at [email protected] or via 24/7 live chat within the platform. We will respond to your request within 30 working days.
Certain rights may be limited in specific circumstances — for example, we may be unable to delete data required to fulfil legal obligations or resolve outstanding disputes. We will explain the reasons if a request cannot be fully accommodated.
As a global platform operating in Malaysia, aa66 may need to transfer and store your information on servers located outside Malaysia. All cross-border data transfers carried out by aa66 are subject to strict safeguards:
Your data will not be transferred to countries without adequate data protection laws without appropriate additional safeguards.
The aa66 platform includes integrations with payment providers, game suppliers, and third-party support services. While we carefully select our third-party partners, aa66 is not responsible for their separate privacy practices.
Every third-party service provider integrated with the aa66 platform has its own Privacy Policy. We encourage you to read the relevant provider's privacy policy when interacting with their services. Third-party integrations on the aa66 platform involve only the minimum data required for the specific function.
AA66 reserves the right to update or amend this Privacy Policy at any time in response to changes in law, industry practices, or how we handle data. Any material changes will be communicated to registered players via:
The "Updated" date at the top of this document always reflects the latest version in effect. Continued use of the platform after changes take effect constitutes your acceptance of the updated Policy.
If you have any questions, concerns, or complaints about how aa66 handles your personal data, or if you wish to exercise any of your privacy rights, please contact us through the following channels:
We are committed to responding to all privacy-related enquiries within 14 working days. For more complex cases requiring thorough investigation, we will notify you within that timeframe and provide a realistic resolution timeline.
Your Satisfaction is Our Priority: If you are not satisfied with our response, you have the right to lodge a complaint with the Malaysian Personal Data Protection Commissioner (PDPD) under the Personal Data Protection Act 2010.
Aa66 servers are hosted in Tier III data centers with strict physical and digital security, multi-layered redundancy, and continuous 24/7 monitoring.
All aa66 data management procedures are designed and audited to ensure ongoing full compliance with Malaysia's Personal Data Protection Act 2010.
All aa66 staff who handle player data undergo regular data protection and cybersecurity training to ensure best practices are upheld at all times.
Independent external cybersecurity firms conduct regular penetration testing and comprehensive security audits on the aa66 platform to identify emerging vulnerabilities.
The aa66 security team has tested incident response procedures in place to respond swiftly in the event of any data breach or security incident.
Once the data retention period expires, your data is deleted using procedures that ensure it cannot be recovered by any party.